Hacker News Reader

Looks like it's a Wordpress blog: http://upvoted.com/wp-admin

For this use case, there is absolutely nothing wrong with a WordPress blog.

There may be. WordPress is not ironclad and Reddit is a big target.

At the very least, there's value in whitelisting IP access to the wp-admin login.